Automatic exploitation generation method of write-what-where vulnerability [可控内存写漏洞自动利用生成方法]

作者：Huang H.; Su P.; Yang Y.; Jia X.

来源：Journal on Communications, 2022, 43(1): 83-95.

DOI：10.11959/j.issn.1000-436x.2022003

• Automatic exploitation generation
• Control flow hijacking
• Dynamic taint analysis
• Vulnerability exploitation element
• Write-what-where

To solve the problem that the current vulnerability automatic exploitation generation methods cannot automatically generate control-flow-hijacking exploitation from write-what-where, a method of automatic exploitation generation for write-what-where was proposed. First, the write-what-where vulnerability was detected based on the memory address control strength dynamic taint analysis method. Then, the vulnerability exploitation elements were searched based on the vulnerability exploitation modes, and the exploitation of write-what-where vulnerability was generated automatically by constraint solving. The experimental results show that the proposed method can effectively detect write-what-where vul-nerability, search exploitation elements, and automatically generate the control-flow-hijacking exploitation from write-what-where.

• 单位
  中国科学院大学